[Samba] winbind running in PDC Samba server

[John H Terpstra]

On Wed, 31 Dec 2003, [iso-8859-1] Fermín Galán Márquez wrote:

> Hello,
>
> HOWTO chapter 21 describes the use of winbind daemon in a Samba domain
> member Server, but it's possible (and desirable) to run winbind in a PDC
> Samba server? The question is due to it that in that case it seems it is not
> necessary winbind for authenticate/mapping users against a external WinNT4
> PDC, the Samba PDC perform authentication itself (and the mapping its not
> necessary, because Samba run in UNIX, where each user/group have an
> UID/GID).

Correct.

> What about when there is a trust relationship between Samba domain and an
> external WinNT4 domain? (I think in this case winbind could be necessary, to
> assign SID in the WinNT4 domain to users of the Samba PDC domain, but I'm
> not sure).

Winbind is needed to map SIDs from foreign domains and from machines that
are not domain members. That is why it is a good idea to run winbind on
all servers.

Cheers,
John T.
-- 
John H Terpstra
Email: jht at samba.org